Staff Windows Kernel Security Engineer – Enforcement

BeyondTrust; United States; On-site; USD 150,000 - 230,000; Full time

Job summary

BeyondTrust is seeking a Staff Software Development Engineer to own the Windows kernel-space enforcement for the Identity Security Platform. You will define direction for kernel-mode enforcement, implement hooks, and ensure safe real-time decisions across large fleets.

You will collaborate with Linux and macOS teams, share one policy language, and push secure, scalable in-kernel and userspace integrations. Strong Windows kernel expertise and leadership are essential.

Qualifications

• Deep Windows kernel internals and I/O manager/IRP flow, production kernel-mode driver development.
• Experience shipping file-system minifilters or similar callback-based drivers.
• Knowledge of kernel protections, signing, and deployment best practices.

Responsibilities

• Design, build, and own kernel-mode enforcement drivers for Windows endpoints.
• Own the kernel/user-mode enforcement boundary and policy evaluation.
• Improve enforce-mode latency and handle large fleet scale with hashing caches.

Skills

Windows kernel

kernel-mode driver

C/C++/Rust

AI-first development

kernel debugging

system design

leadership

Education

Bachelor's degree in Computer Science or related field

Tools

WDK

WDF/KMDF

WinDbg

ETW

Job description

BeyondTrust is seeking a Staff Software Development Engineer to own the Windows kernel-space enforcement for the Identity Security Platform. You will define direction for kernel-mode enforcement, implement hooks, and ensure safe real-time decisions across large fleets.

You will collaborate with Linux and macOS teams, share one policy language, and push secure, scalable in-kernel and userspace integrations. Strong Windows kernel expertise and leadership are essential.